SoapUI by default listens on all interfaces on TCP port 1198 where youcan find SoapUI Integration (RMI) instance. SoapUI uses vulnerableJava libraries (commons-collections-3.2.1.jar andgroovy-all-2.1.7.jar) which can be used to remotly execute commandswith permissions of user that started SoapUI.